CN106211203A - Lock network data updating method and device - Google Patents

Abstract

The invention discloses a kind of lock network data updating method, when receiving the lock network data upgrade request that mobile terminal sends, server obtains, according to described lock network data upgrade request, the association identification information that described mobile terminal is corresponding；Described server obtains the lock network data that described association identification information is corresponding；Described lock network data are sent to described mobile terminal by described server, carry out the upgrading of lock network data for described mobile terminal.The invention also discloses a kind of lock network data update device.Present invention achieves the lock network data to mobile terminal is corresponding to upgrade.

Description

Lock network data upgrade method and device

technical field

The invention relates to the communication field, in particular to a method and device for updating network lock data.

Background technique

With the development of communication technology, new versions of the data of various mobile devices often appear, and the data of the new version will add some more functions than the data of the old version. After people use their mobile devices for a period of time, they generally The data in is updated. The upgrade function of the existing data upgrade server includes software and hardware updates, which can update the same data on a large number of mobile devices, so that each mobile device after the update has the same data, but for a safer lock network Data, because of the uniqueness of each device, because the existing technology cannot complete the upgrade.

Network lock is used to restrict mobile devices to only use SIM cards of some operators, but not to use SIM cards of other operators. For example, if the MCC and MNC of the Chinese mobile operator are 460, 02 and 460, 00 respectively, then write 460, 02 and 460, 00 into the mobile device, then insert any other non-460, 02 or non-460, 00 SIM card, All mobile devices limit the use of SIM cards to achieve the purpose of locking the network. Because the cracking method of exchanging the network lock data of two mobile devices is the usual hand of hackers, the network lock data is usually a copy of some key information of the mobile device (for example, this copy consists of one or more information origins such as hardware ID) The data is directly used or generated by algorithm transformation or encrypted) and encrypted and stored together, so that the data can be copied between prototypes and cannot be used, so as to prevent hackers from cracking. For example, there are two mobile phones of China Mobile, identified as Phone1 and Phone2, and another two mobile phones of China Unicom, identified as Phone3 and Phone4, the MCC and MNC information stored in Phone1 and Phone2 are the same, both are 460, 02 and 460,00; the MCC and MNC of China Unicom are stored in Phone3 and Phone4, which are 460,01, and the two prototypes are the same. Hackers can copy the MCC and MNC information of Phone3 or Phone4 to Phone1 or Phone2, then Phone1 or Phone2 can use the SIM card of China Unicom (460, 01), because the mobile phone of China Mobile can be inserted into the SIM card of China Unicom. , or China Mobile's mobile phone terminal is a free gift to users to increase product competitiveness. This kind of cracking is a great loss for China Mobile. Gradually, the network lock data is encrypted and stored together with the hardware ID of the mobile terminal device. Every time the mobile phone starts up, it will verify the encrypted data and verify whether it is the hardware ID of the device. If it is not, it will be regarded as invalid data, which will increase the data security. However, while improving security, because the data encrypted by each device is different, the current FOTA upgrade server upgrades these locked network data is still somewhat lacking.

Contents of the invention

The main purpose of the present invention is to propose a method and device for upgrading network lock data, aiming at solving the technical problem that the network lock data of mobile terminals cannot be upgraded.

In order to achieve the above object, the present invention provides a network lock data upgrade method, the lock network data upgrade method includes the following steps:

When receiving the network lock data upgrade request sent by the mobile terminal, the server obtains the association identification information corresponding to the mobile terminal according to the network lock data upgrade request;

The server obtains the network lock data corresponding to the association identification information;

The server sends the network lock data to the mobile terminal, so that the mobile terminal can upgrade the network lock data.

Preferably, when receiving the network lock data upgrade request sent by the mobile terminal, the step of the server obtaining the association identification information corresponding to the mobile terminal according to the network lock data upgrade request includes:

When receiving the network lock data upgrade request sent by the mobile terminal, the server obtains the encrypted association identification information corresponding to the mobile terminal according to the network lock data upgrade request;

The server decrypts the acquired encrypted association identification information to obtain decrypted association identification information.

Preferably, the step of the server obtaining the network lock data corresponding to the association identification information includes:

The server extracts the network lock information corresponding to the association identification information;

The server generates network lock data corresponding to the association identification information based on the acquired association identification information and the network lock information.

Preferably, the step of the server generating the network lock data corresponding to the association identification information based on the obtained association identification information and the network lock information includes:

The server encrypts the acquired association identification information and the network lock information, so as to generate network lock data corresponding to the association identification information.

Preferably, when receiving the network lock data upgrade request sent by the mobile terminal, before the server obtains the association identification information corresponding to the mobile terminal according to the network lock data upgrade request, the network lock data upgrade method includes :

When detecting that the lock network information is updated, the server obtains the mobile terminal to be updated;

The server sends an update instruction of network lock information to the acquired mobile terminal to be updated, so that when the mobile terminal to be updated receives the update instruction, it sends network lock data to the server based on its associated identification information Escalation request.

In addition, in order to achieve the above purpose, the present invention also proposes a network lock data upgrade device, the lock network data upgrade device includes:

The first acquisition module is configured to acquire the association identification information corresponding to the mobile terminal according to the network lock data upgrade request when receiving the network lock data upgrade request sent by the mobile terminal;

The second obtaining module is used to obtain the network lock data corresponding to the association identification information;

A sending module, configured to send the network lock data to the mobile terminal, so that the mobile terminal can upgrade the network lock data.

Preferably, the first acquisition module includes:

The acquiring unit is configured to acquire the encrypted association identification information corresponding to the mobile terminal according to the network lock data upgrade request when receiving the network lock data upgrade request sent by the mobile terminal;

A decryption unit, configured to decrypt the obtained encrypted association identification information to obtain decrypted association identification information.

Preferably, the second acquisition module includes:

The extraction unit is also used to extract the network lock information corresponding to the association identification information;

A generating unit, configured to generate network lock data corresponding to the association identification information based on the acquired association identification information and the network lock information.

Preferably, the generation unit is further configured to encrypt the acquired association identification information and the network lock information, so as to generate network lock data corresponding to the association identification information.

Preferably, the first acquiring module is further configured to acquire a mobile terminal to be updated when an update of the network lock information is detected; the sending module is also configured to send an update instruction of the network lock information to the acquired mobile terminal to be updated The mobile terminal is used for the mobile terminal to be updated to send a network lock data upgrade request to the server based on its association identification information when receiving the update instruction.

In the network lock data upgrade method and device proposed by the present invention, when receiving the network lock data upgrade request sent by the mobile terminal, the server obtains the association identification information corresponding to the mobile terminal according to the network lock data upgrade request, and obtains the Associate the network lock data corresponding to the identification information, and then send the network lock data to the mobile terminal for the mobile terminal to upgrade the network lock data, and the server generates the association based on the association identification information of the mobile terminal. The network lock data corresponding to the identification information realizes the upgrade of the network lock data corresponding to the mobile terminal.

Description of drawings

Fig. 1 is a schematic flow chart of the first embodiment of the data locking method of the present invention;

FIG. 2 is a schematic diagram of a refinement process of step S10 in FIG. 1;

FIG. 3 is a schematic diagram of a refinement process of step S20 in FIG. 1;

Fig. 4 is a schematic flow chart of the second embodiment of the data locking method of the present invention;

Fig. 5 is a schematic diagram of the functional modules of the first embodiment of the data locking device of the present invention;

FIG. 6 is a schematic diagram of a refined functional module of the first acquisition module 10 in FIG. 5;

FIG. 7 is a schematic diagram of detailed functional modules of the second acquisition module 20 in FIG. 5 .

The realization of the purpose of the present invention, functional characteristics and advantages will be further described in conjunction with the embodiments and with reference to the accompanying drawings.

detailed description

It should be understood that the specific embodiments described here are only used to explain the present invention, not to limit the present invention.

The invention provides a method for upgrading network lock data.

Referring to FIG. 1 , FIG. 1 is a schematic flow chart of a first embodiment of a data network locking method according to the present invention.

This embodiment proposes a method for upgrading network lock data, and the method for upgrading network lock data includes:

Step S10, when receiving the network lock data upgrade request sent by the mobile terminal, the server obtains the association identification information corresponding to the mobile terminal according to the network lock data upgrade request;

In this embodiment, the association identification information of the mobile terminal preferably includes the hardware serial number, CPU serial number or other ID information of the mobile terminal, and the server preferably includes a FOTA (FirmwareOver-The Air, firmware upgrade over the air) server.

In this embodiment, referring to FIG. 2, the step S10 includes:

Step S11, when receiving the network lock data upgrade request sent by the mobile terminal, the server obtains the encrypted association identification information corresponding to the mobile terminal according to the network lock data upgrade request;

In this embodiment, in order to improve the security of the network lock data corresponding to the server upgrading the mobile terminal, it is preferable to generate a pair of public key and Private key, according to the public key and private key to carry out the information encryption and decryption process, thereby improving the security of the upgrade process of the lock network data, the public key is open to the public, that is, each mobile terminal can use the server public key, and the private key is stored by the server. It can be understood that when the mobile terminal securely obtains the network lock data from the server without revealing its associated identification information such as the hardware serial number of the mobile terminal, when establishing a communication connection relationship with the server, the network lock data upgrade request Preferably, the mobile terminal first obtains its association identification information, and then encrypts its association identification information with a public key in the server to generate encrypted association identification information, and sends the encrypted association identification information to the server as a data upgrade request.

The way in which the server obtains the encrypted association identification information corresponding to the mobile terminal according to the network lock data upgrade request may be to obtain the encrypted association identification corresponding to the mobile terminal each time a data upgrade request sent by a mobile terminal is received. information, or each time a preset number of data upgrade requests (such as 50) are received from mobile terminals, the encrypted association identification information corresponding to each mobile terminal is obtained.

Step S12, the server decrypts the acquired encrypted association identification information to obtain decrypted association identification information.

In this embodiment, when receiving the network lock data upgrade request sent by the mobile terminal, when the server obtains the encrypted association identification information corresponding to the mobile terminal, such as the encrypted hardware serial number, the The encrypted association identification information is decrypted to obtain the original association identification information, such as the original hardware serial number of the mobile terminal. Those skilled in the art can understand that, through the encryption and decryption process of the association identification information, the security of the mobile terminal sending the network lock data upgrade request is improved, and the leakage of its association identification information is effectively prevented, even if the data upgrade The request is obtained by other servers, and other servers cannot obtain the association identification information of the mobile terminal.

Step S20, the server obtains the network lock data corresponding to the association identification information;

In this embodiment, the embodiment that the server obtains the network lock data corresponding to the association identification information includes:

1) The first embodiment: the server pre-stores the network lock data corresponding to each mobile terminal, and when the association identification information corresponding to each mobile terminal is obtained, determine the network lock data corresponding to each association identification information, and the determined each The network lock data is used as network lock data to be sent. That is, the network lock data corresponding to each mobile terminal is set on the server, and when the server obtains the associated identification information, it determines the network lock data corresponding to the obtained associated identification information, and then stores the network locked data as the object to be sent.

2) Second embodiment: with reference to Fig. 3, described step S20 comprises:

Step S21, the server extracts the network lock information corresponding to the association identification information;

In this embodiment, the preferred solution is that the server pre-stores various types of network lock information, and the network lock information preferably includes the MCC (Mobile Country Code, Mobile Country Code) number or MNC (Mobile Country Code) number of the mobile terminal. Network Code, mobile network number), that is, the server can pre-store the MCC number of the mobile terminal equipment sold in the US market, the MCC number of the mobile terminal equipment sold in the Japanese market, or the MCC number of the mobile terminal equipment sold in the Chinese market , and when the associated identification information is obtained, extract the network lock information corresponding to the associated identification information, for example, the encoding method corresponding to the hardware serial number of the mobile terminal equipment sold in the Chinese market is the same as that of the mobile terminal equipment sold in the US market If the hardware serial numbers are not the same or the corresponding encoding methods are different, if the hardware serial numbers of the mobile terminal equipment sold in the Chinese market are obtained, the hardware serial numbers are identified, and the mobile terminal equipment sold in the Chinese market is obtained according to the determined hardware serial numbers. MCC number.

In step S22, the server generates network lock data corresponding to the association identification information based on the acquired association identification information and the network lock information.

In this embodiment, the preferred solution is that the network lock information is pre-stored in the server, and the network lock data is generated by adding the associated identification information of the terminal to the network locked information. Since the associated identification information of each terminal is different, even if the associated identification information is added The same network lock information will also generate different network lock data, so that the server only stores the same network lock information, and can also upgrade different network lock data corresponding to each mobile terminal.

Further, in order to improve communication security, the step S22 includes the server encrypting the acquired association identification information and the network lock information, so as to generate network lock data corresponding to the association identification information.

In this embodiment, based on the acquired association identification information and the network lock information, the server encrypts the association identification information and the network lock information with a pre-stored private key to generate network lock data, That is, after the server decrypts the associated identification information of the mobile terminal, the server obtains the unique identification ID corresponding to the mobile terminal, such as a hardware serial number, and then, the server generates an algorithm such as an RSA algorithm based on a preset lock network data, using The pre-stored private key encrypts or signs the association identification information such as the hardware serial number and the network lock information such as MCC information to generate the network lock data corresponding to the association identification information. The specific embodiments are as follows: the FOTA server uses its After the private key decrypts the original hardware serial number, CPU serial number or other ID original data information of the mobile terminal, use the private key to encrypt the MCC network lock information and the unique identification ID corresponding to each mobile terminal, such as MCC and After Id1 is bound and encrypted, S1 will be upgraded. After MCC and Id2 are bound and encrypted, S2 will be upgraded. Similarly, after MCC and Idn are bound and encrypted, Sn will be upgraded. That is, MCC+Id(n) can generate Sn through a preset encryption algorithm. Even if the MCC is the same, if the Id(n) is different, the Sn is also different, and the server will use the associated identification information of each terminal to perform After encryption, the network lock data corresponding to each associated identification information is generated.

Step S30, the server sends the network lock data to the mobile terminal, so that the mobile terminal can upgrade the network lock data.

In this embodiment, the embodiment of step S30 includes:

1) In the first embodiment, the server obtains the network locking data corresponding to each associated identification information according to the associated identification information of each mobile terminal, and then sends the acquired network locking data corresponding to each mobile terminal to each mobile terminal. For example, the server obtains the network lock data numbered 1 according to the mobile terminal with the hardware serial number 1, obtains the network lock data numbered 2 according to the mobile terminal with the hardware serial number 2, and similarly obtains the network lock data according to the mobile terminal with the hardware serial number N The number is N network lock data, and each acquired network lock data is sent to each corresponding mobile terminal, so that each mobile terminal can upgrade the network lock data.

2) In the second embodiment, the server generates network lock data corresponding to each association identification information according to preset network lock information and association identification information of each mobile terminal, and then sends the network lock data to the mobile terminal, For the mobile terminal to decrypt the network lock data through the public key of the server and apply the decrypted network lock data when receiving the network lock data; or when the mobile terminal receives the network lock data , verifying the network lock data by using the public key of the server, and applying the network lock data when verifying that the network lock data is network lock data corresponding to its associated identification information. The preferred solution is that when the mobile terminal receives the network lock data corresponding to the associated identification information, the network lock data is decrypted by the pre-stored public key, such as receiving the encrypted network lock data MCC+Id( After n), decrypt the network lock data by the pre-stored public key, and after the decryption is successful, restore MCC+Id(n) to MCC information, and apply the network lock data MCC decrypted, that is, replace the old The version of the network lock information is upgraded to a new version of the network lock information; or the mobile terminal verifies the legality of the network lock data through the public key, and applies the encrypted network lock data after the verification is successful. Simultaneously, if the mobile terminal whose Id number is 1 receives the network lock data as MCC+Id(2), then when using the public key to decrypt, the mobile terminal whose Id number is 1 verifies and decrypts the network lock data MCC+Id(2). Id(2), but if the Id number verification fails, it will be rejected, which realizes the security during the lock network data upgrade process. It can be understood that in this embodiment, the associated identification information and network locking information of each mobile terminal are encrypted by using the network locking information pre-stored in the server and the received associated identification information corresponding to each mobile terminal to generate The network lock data corresponding to each associated identification information is sent to each mobile terminal to upgrade the network lock data of each terminal, which solves the problem that when the network lock data of the mobile terminal fails or needs to be updated, the mobile terminal should be returned to The problem of factory update or upgrade has been solved, and a large-scale upgrade of the network lock data of each mobile terminal has been realized.

In the network lock data upgrade method proposed in this embodiment, when receiving the network lock data upgrade request sent by the mobile terminal, the server obtains the association identification information corresponding to the mobile terminal according to the network lock data upgrade request, and obtains the association The network lock data corresponding to the identification information, and then send the network lock data to the mobile terminal for the mobile terminal to upgrade the network lock data, and the server generates the association identification based on the association identification information of the mobile terminal The network lock data corresponding to the information realizes the upgrade of the network lock data corresponding to the mobile terminal.

Further, in order to improve the flexibility of network lock data upgrade, referring to FIG. 4 , a second embodiment of the method for upgrading network lock data of the present invention is proposed based on the first embodiment. In this embodiment, before the step S10, the lock Network data upgrade methods include:

Step S40, when detecting that the network lock information is updated, the server acquires the mobile terminal to be updated;

Step S50, the server sends an update instruction of network lock information to the obtained mobile terminal to be updated, so that when the mobile terminal to be updated receives the update instruction, it sends an update instruction to the server based on its associated identification information. Lock network data upgrade request.

In this embodiment, the way for the server to obtain the mobile terminal to be updated includes:

1) Method 1, when the server uses the preset mobile terminal as the mobile terminal to be updated, for example, the server stores the IDs of mobile terminals whose ID numbers are odd numbers from 1 to 1000, that is, the ID numbers are 1, 3, and 5. . . 997 and 999, when detecting that the network lock information is updated, the server uses the preset mobile terminal as the mobile terminal to be updated. Then, according to the obtained mobile terminal, the server sends an update instruction of network lock information to the obtained mobile terminal.

2) Mode 2, when the server takes the mobile terminals in the preset range as the mobile terminals to be updated, if the server stores the IDs of the mobile terminals whose ID numbers are 5-500, then when it detects that the network lock information is updated, the server will update the The mobile terminals in the preset range are regarded as the mobile terminals to be updated. That is to say, when the server regards the mobile terminals in the preset range as the mobile terminals to be updated, when it detects that the network lock information is updated, it searches whether the ID numbers of each mobile terminal are within the preset range, for example, the server only updates The mobile terminal whose ID number is 5-500, when searching for a mobile terminal to be updated, searches for a mobile terminal with an ID number of 5-500 according to the connected communication connection relationship, and searches for a mobile terminal with an ID number of 5-500 As mobile terminals to be updated, mobile terminals whose ID numbers are less than or equal to 5 or greater than or equal to 500 do not meet the upgrade conditions. Then, according to the acquired mobile terminal, the server sends an update instruction of network lock information to the acquired mobile terminal, so that when the mobile terminal receives the update instruction, it can send an update instruction to the mobile terminal based on its associated identification information. The server sends a lock network data upgrade request.

Further, when the server sends an update instruction of network lock information to the obtained mobile terminal according to the obtained mobile terminal, when the mobile terminal receives the update instruction, it may choose to respond to the update instruction, or Can choose not to respond to the update instruction, when the mobile terminal responds to the update instruction, preferably send an upgrade request for the network lock data, for the server to send the network lock data to be upgraded, further, to improve the network lock data upgrade intelligence, when the mobile terminal wants to inquire whether there is a new version of the network lock data, it can send a network lock data query command to the server, and when the server responds to the lock network data query command, the mobile terminal The terminal can know whether there is a new version of the network lock data, so as to choose whether to update the network lock data.

The present invention further provides a network lock data upgrading device.

Referring to FIG. 5 , FIG. 5 is a schematic diagram of the functional modules of the first embodiment of the network locking data upgrading device of the present invention.

It should be emphasized that, for those skilled in the art, the functional block diagram shown in Figure 5 is only an example diagram of a preferred embodiment, and those skilled in the art focus on the functional modules of the network lock data upgrading device shown in Figure 5 , can easily supplement new functional modules; the names of each functional module are self-defined names, which are only used to assist in understanding each program function block of the network lock data upgrading device, and are not used to limit the technical solution of the present invention. The core of the solution is the function to be achieved by each function module with a custom name.

This embodiment proposes a network lock data upgrade device, the lock network data upgrade device includes:

The first acquisition module 10 is configured to acquire the association identification information corresponding to the mobile terminal according to the network lock data upgrade request when receiving the network lock data upgrade request sent by the mobile terminal;

In this embodiment, the association identification information of the mobile terminal preferably includes the hardware serial number, CPU serial number or other ID information of the mobile terminal, and the server preferably includes a FOTA (FirmwareOver-The Air, firmware upgrade over the air) server.

In this embodiment, referring to FIG. 6, the first acquisition module 10 includes:

The obtaining unit 11 is configured to obtain the encrypted association identification information corresponding to the mobile terminal according to the network lock data upgrade request when receiving the network lock data upgrade request sent by the mobile terminal;

In this embodiment, in order to improve the security of the network lock data upgrade corresponding to the mobile terminal, it is preferable to generate a pair of public key and private key through a preset encryption algorithm such as RSA algorithm (a kind of asymmetric encryption algorithm), according to the The public key and the private key carry out the information encryption and decryption process, thereby improving the security of the upgrade process of the network lock data, and the public key is open to the outside world, that is, each mobile terminal can use the public key of the lock network data upgrade device. key, and the private key is stored in the network lock data upgrade device. It can be understood that, in order to securely obtain the network lock data from the network lock data upgrade device without revealing its associated identification information such as the hardware serial number of the mobile terminal, when the mobile terminal establishes a communication connection relationship, the network lock data upgrade The request is preferably that the mobile terminal first obtains its association identification information, and then encrypts its association identification information with the public key to generate encrypted association identification information, and sends the encrypted association identification information as a data upgrade request to the lock network data Upgrade device.

The acquisition unit 11 acquires the encrypted association identification information corresponding to the mobile terminal according to the network lock data upgrade request, and acquires the encrypted association identification information corresponding to the mobile terminal each time a data upgrade request sent by a mobile terminal is received. association identification information, or each time a preset number of data upgrade requests (for example, 50) are received from mobile terminals, the encrypted association identification information corresponding to each mobile terminal is acquired.

The decryption unit 12 is configured to decrypt the obtained encrypted association identification information to obtain decrypted association identification information.

In this embodiment, when receiving the network lock data upgrade request sent by the mobile terminal, when the acquiring unit 11 acquires the encrypted association identification information corresponding to the mobile terminal, such as the encrypted hardware serial number, the decrypting unit 12 The encrypted association identification information is decrypted through the pre-stored private key to obtain the original association identification information, such as the original hardware serial number of the mobile terminal. Those skilled in the art can understand that, through the encryption and decryption process of the association identification information, the security of the mobile terminal sending the network lock data upgrade request is improved, and the leakage of its association identification information is effectively prevented, even if the data upgrade The request is obtained by other network lock data upgrade devices, and other network lock data upgrade devices cannot obtain the associated identification information of the mobile terminal.

The second acquisition module 20 is configured to acquire the network lock data corresponding to the associated identification information;

In this embodiment, the embodiment that the second obtaining module 20 obtains the network lock data corresponding to the association identification information includes:

1) The first embodiment: the network lock data corresponding to each mobile terminal is pre-stored in the network lock data upgrade device, and when the association identification information corresponding to each mobile terminal is obtained, the network lock data corresponding to each association identification information is determined, and Each of the determined network lock data is used as the network lock data to be sent. That is, the network lock data corresponding to each mobile terminal is set on the network lock data upgrading device, and the first acquisition module 10 determines the network lock data corresponding to the acquired association identification information when acquiring the associated identification information , and then use the locked network data as the object to be sent.

2) Second embodiment: with reference to Fig. 7, described second obtaining module 20 comprises:

The extraction unit 21 is also used to extract the network lock information corresponding to the association identification information;

In this embodiment, the preferred solution is that the network locking data upgrading device pre-stores various types of network locking information, and the network locking information preferably includes the MCC (Mobile Country Code, mobile country code) number or MNC (Mobile Network Code, mobile network number) number, that is, the MCC number of the mobile phone terminal equipment sold in the U.S. market, the MCC number of the mobile phone terminal equipment sold in the Japanese market, or The MCC number of the mobile phone terminal equipment, and when the first acquisition module 10 acquires the association identification information, the extraction unit 21 extracts the network lock information corresponding to the association identification information, for example, a mobile phone sold in the Chinese market The encoding method corresponding to the hardware serial number of the terminal equipment is different from the hardware serial number of the mobile terminal equipment sold in the US market or the corresponding encoding method is different. If the hardware serial number of the mobile terminal equipment sold in the Chinese market is obtained, the identified According to the above hardware serial number, the MCC number of the mobile phone terminal equipment sold in the Chinese market is obtained according to the determined hardware serial number.

The generating unit 22 is configured to generate network lock data corresponding to the association identification information based on the acquired association identification information and the network lock information.

In this embodiment, the preferred solution is that the network lock information is pre-stored in the network lock data upgrading device, and the network lock data is generated by the generation unit 22 according to the network lock information plus the associated identification information of the terminal. The information is different, even if the same network locking information is added, different network locking data will be generated, so that the network locking data upgrade device only stores the same network locking information, and can also perform different network locking data corresponding to each mobile terminal. upgrade.

Further, in order to improve communication security, the generation unit 22 is further configured to encrypt the acquired association identification information and the network lock information, so as to generate network lock data corresponding to the association identification information.

In this embodiment, based on the obtained association identification information and the network lock information, the generation unit 22 encrypts the association identification information and the network lock information with a pre-stored private key to generate a network lock data, that is, after the decryption unit 12 decrypts the associated identification information of the mobile terminal, the acquisition unit 11 acquires the unique identification ID corresponding to the mobile terminal such as a hardware serial number, and then the generation unit 22 based on the preset A network lock data generation algorithm such as the RSA algorithm, using a pre-stored private key to encrypt or sign the associated identification information such as a hardware serial number and the network lock information such as MCC information, to generate the network lock data corresponding to the associated identification information , the specific embodiment is as follows: after the decryption unit 12 uses its private key to decrypt the original hardware serial number, CPU serial number or other ID original data information of the mobile terminal, use the private key to lock the MCC network information and each mobile terminal The corresponding unique ID is encrypted. For example, S1 will be upgraded after MCC is bound and encrypted with Id1, and S2 will be upgraded after MCC and Id2 are bound and encrypted. Similarly, Sn will be upgraded after MCC and Idn are bound and encrypted. That is, MCC+Id(n) can generate Sn through a preset encryption algorithm. Even if MCC is the same, if Id(n) is all different, Sn is also different, and then the generation unit 22 will use the associated identification of each terminal After the information is encrypted, the network lock data corresponding to each associated identification information is generated.

The sending module 30 is configured to send the network lock data to the mobile terminal, so that the mobile terminal can upgrade the network lock data.

In this embodiment, the sending module 30 sends the network lock data to the mobile terminal, so that the mobile terminal can upgrade the network lock data. Examples include:

1) In the first embodiment, according to the association identification information of each mobile terminal, the network lock data corresponding to each association identification information is obtained, and then the acquired network lock data corresponding to each mobile terminal is sent to each mobile terminal. For example, the acquisition module 10 acquires the network lock data numbered 1 according to the mobile terminal whose hardware serial number is 1, and acquires the network lock data numbered 2 according to the mobile terminal whose hardware serial number is 2. Similarly, according to the mobile terminal whose hardware serial number is N The terminal acquires the network lock data numbered N, and the sending module 30 sends each acquired network lock data to each corresponding mobile terminal, so that each mobile terminal can upgrade the network lock data.

2) In the second embodiment, the generation unit 22 generates the network lock data corresponding to each association identification information according to the preset network lock information and the association identification information of each mobile terminal, and the sending module 30 then sends the network lock data sent to the mobile terminal, so that when the mobile terminal receives the network lock data, the public key is used to decrypt the network lock data and apply the decrypted network lock data; or the mobile terminal receives the network lock data When receiving the network lock data, verify the network lock data through the public key, and apply the network lock data when verifying that the network lock data is the network lock data corresponding to its associated identification information. The preferred solution is that when the mobile terminal receives the network lock data corresponding to the associated identification information, the network lock data is decrypted by the pre-stored public key, such as receiving the encrypted network lock data MCC+Id( After n), decrypt the network lock data through the pre-stored public key. After the decryption is successful, restore MCC+Id(n) to MCC information, and apply the network lock data MCC decrypted, that is, the old The version of the network lock information is upgraded to a new version of the network lock information; or the mobile terminal verifies the legality of the network lock data through the public key, and applies the encrypted network lock data after the verification is successful. At the same time, if the mobile terminal whose Id number is 1 receives the network lock data as MCC+Id(2), when decrypting with the public key, the mobile terminal whose Id number is 1 verifies and decrypts the network lock data MCC+Id(2). Id(2), but if the Id number verification fails, it will be rejected, which realizes the security during the lock network data upgrade process. It can be understood that, in this embodiment, the generation unit 22 uses the pre-stored network locking information and the received associated identification information corresponding to each mobile terminal to perform the associated identification information and network locking information of each mobile terminal. Encrypt to generate the network lock data corresponding to each associated identification information, and the sending module 30 sends to each mobile terminal to upgrade the network lock data of each terminal, which solves the problem when the network lock data of the mobile terminal fails or needs to be updated. , the problem of returning the mobile terminal to the factory for updating or upgrading, realizes a large-scale upgrade of the network lock data of each mobile terminal.

The network lock data upgrade device proposed in this embodiment, when receiving the network lock data upgrade request sent by the mobile terminal, the server obtains the association identification information corresponding to the mobile terminal according to the network lock data upgrade request, and obtains the association The network lock data corresponding to the identification information, and then send the network lock data to the mobile terminal for the mobile terminal to upgrade the network lock data, and the server generates the association identification based on the association identification information of the mobile terminal The network lock data corresponding to the information realizes the upgrade of the network lock data corresponding to the mobile terminal.

Further, in order to improve the flexibility of network lock data upgrade, with reference to Figure 7, a second embodiment of the network lock data upgrade device of the present invention is proposed based on the first embodiment. In this embodiment, the first acquisition module 10 also It is used to obtain the mobile terminal to be updated when the network lock information update is detected;

The sending module 30 is further configured to send an update instruction of network lock information to the obtained mobile terminal to be updated, so that when the mobile terminal to be updated receives the update instruction, it can send an update instruction based on its associated identification information to the mobile terminal to be updated. The above server sends a lock network data upgrade request.

In this embodiment, the way for the first acquiring module 10 to acquire the mobile terminal to be updated includes:

1) Mode 1, when the lock network data upgrade device uses the preset mobile terminal as the mobile terminal to be updated, such as storing the ID of the mobile terminal whose ID number is an odd number in 1-1000, that is, the ID number is 1, 3, 5 . . . 997 and 999, when it is detected that the network lock information is updated, use the preset mobile terminal as the mobile terminal to be updated. Then, according to the mobile terminal obtained by the first obtaining module 10, the sending module 30 sends an update instruction of network lock information to the obtained mobile terminal.

2) Mode 2, when the lock network data upgrade device uses the mobile terminal in the preset range as the mobile terminal to be updated, such as storing the ID of the mobile terminal whose ID number is 5-500, when it detects that the network lock information is updated, it will The mobile terminals within the preset range are used as mobile terminals to be updated. That is to say, when the mobile terminals in the preset range are used as the mobile terminals to be updated, when it is detected that the network lock information is updated, search whether the ID numbers of each mobile terminal are within the preset range, for example, only upgrade the ID number 5-500 mobile terminal, when searching for a mobile terminal to be updated, search for a mobile terminal with an ID number of 5-500 according to the connected communication connection relationship, and use the searched mobile terminal with an ID number of 5-500 as the mobile terminal to be updated. Updated mobile terminals, and mobile terminals with ID numbers less than or equal to 5 or greater than or equal to 500 do not meet the upgrade conditions. Then according to the mobile terminal obtained by the first obtaining module 10, the sending module 30 sends an update instruction of the network lock information to the obtained mobile terminal, so that when the mobile terminal receives the update instruction, based on Its associated identification information sends a network lock data upgrade request to the server.

Further, according to the acquired mobile terminal, when sending an update instruction of network lock information to the acquired mobile terminal, when the mobile terminal receives the update instruction, it can choose to respond to the update instruction, or choose not to In response to the update instruction, when the mobile terminal responds to the update instruction, it preferably sends an upgrade request for the network lock data, so that the server sends the network lock data to be upgraded. Further, in order to improve the intelligence of the network lock data upgrade , when the mobile terminal wants to inquire whether there is a new version of the network lock data, it can send a network lock data query command, and when the network lock data upgrade device responds to the lock network data query command, the mobile terminal You can know whether there is a new version of the network lock data, so as to choose whether to update the network lock data.

It should be noted that, as used herein, the term "comprises", "comprises" or any other variation thereof is intended to cover a non-exclusive inclusion such that a process, method, article or system comprising a set of elements includes not only those elements, It also includes other elements not expressly listed, or elements inherent in the process, method, article, or system. Without further limitations, an element defined by the phrase "comprising a..." does not preclude the presence of additional identical elements in the process, method, article or system comprising that element.

The serial numbers of the above embodiments of the present invention are for description only, and do not represent the advantages and disadvantages of the embodiments.

Through the description of the above embodiments, those skilled in the art can clearly understand that the methods of the above embodiments can be implemented by means of software plus a necessary general-purpose hardware platform, and of course also by hardware, but in many cases the former is better implementation. Based on this understanding, the technical solution of the present invention can be embodied in the form of a software product in essence or the part that contributes to the prior art, and the computer software product is stored in a storage medium (such as ROM/RAM, disk, CD) contains several instructions to make a terminal device (which may be a mobile phone, a computer, a server, an air conditioner, or a network device, etc.) execute the methods described in various embodiments of the present invention.

The above are only preferred embodiments of the present invention, and are not intended to limit the patent scope of the present invention. Any equivalent structure or equivalent process transformation made by using the description of the present invention and the contents of the accompanying drawings, or directly or indirectly used in other related technical fields , are all included in the scope of patent protection of the present invention in the same way.

Claims (10)

1. A method for upgrading network lock data, characterized in that, said method for upgrading network lock data comprises the following steps: When receiving the network lock data upgrade request sent by the mobile terminal, the server obtains the association identification information corresponding to the mobile terminal according to the network lock data upgrade request; The server obtains the network lock data corresponding to the association identification information; The server sends the network lock data to the mobile terminal, so that the mobile terminal can upgrade the network lock data. 2. The method for upgrading network lock data according to claim 1, wherein when receiving the network lock data upgrade request sent by the mobile terminal, the server obtains the corresponding The steps for associating identifying information include: When receiving the network lock data upgrade request sent by the mobile terminal, the server obtains the encrypted association identification information corresponding to the mobile terminal according to the network lock data upgrade request; The server decrypts the acquired encrypted association identification information to obtain decrypted association identification information. 3. The method for upgrading network lock data according to claim 1, wherein the step for the server to obtain the network lock data corresponding to the associated identification information comprises: The server extracts the network lock information corresponding to the association identification information; The server generates network lock data corresponding to the association identification information based on the acquired association identification information and the network lock information. 4. The network lock data upgrading method according to claim 3, wherein the step of the server generating the network lock data corresponding to the association identification information based on the obtained association identification information and the network lock information comprises : The server encrypts the acquired association identification information and the network lock information, so as to generate network lock data corresponding to the association identification information. 5. The method for upgrading network lock data according to any one of claims 1-4, wherein when receiving the network lock data upgrade request sent by the mobile terminal, the server acquires the data according to the lock network data upgrade request. Before the step of associating identification information corresponding to the mobile terminal, the method for upgrading network lock data includes: When detecting that the lock network information is updated, the server obtains the mobile terminal to be updated; The server sends an update instruction of network lock information to the acquired mobile terminal to be updated, so that when the mobile terminal to be updated receives the update instruction, it sends network lock data to the server based on its associated identification information Escalation request. 6. A network lock data upgrade device, characterized in that, the lock network data upgrade device comprises: The first acquisition module is configured to acquire the association identification information corresponding to the mobile terminal according to the network lock data upgrade request when receiving the network lock data upgrade request sent by the mobile terminal; The second obtaining module is used to obtain the network lock data corresponding to the association identification information; A sending module, configured to send the network lock data to the mobile terminal, so that the mobile terminal can upgrade the network lock data. 7. The network lock data upgrading device according to claim 6, wherein the first acquisition module comprises: The acquiring unit is configured to acquire the encrypted association identification information corresponding to the mobile terminal according to the network lock data upgrade request when receiving the network lock data upgrade request sent by the mobile terminal; A decryption unit, configured to decrypt the obtained encrypted association identification information to obtain decrypted association identification information. 8. The network lock data upgrading device according to claim 6, wherein the second obtaining module comprises: The extraction unit is also used to extract the network lock information corresponding to the association identification information; A generating unit, configured to generate network lock data corresponding to the association identification information based on the acquired association identification information and the network lock information. 9. The network lock data upgrading device according to claim 8, wherein the generating unit is further configured to encrypt the obtained association identification information and the network lock information to generate the association identification information Corresponding lock network data. 10. The network lock data upgrading device according to any one of claims 6-9, wherein the first acquisition module is also used to obtain a mobile terminal to be updated when detecting that the network lock information is updated; The sending module is further configured to send an update instruction of network lock information to the acquired mobile terminal to be updated, so that when the mobile terminal to be updated receives the update instruction, it can send the update instruction to the server based on its association identification information Send lock network data upgrade request.